Audits and findings
Learn how the platform audits a compliance review, connects checks, records findings, such as non-compliance, and keeps evidence for reporting.
A platform audit is a definite review of an organization’s compliance program. It provides a place to extend the review, connect relevant controls and collect the findings produced by this work.
Audit scope
Section entitled ‘Audit scope’An audit can review the entire framework or part of it and can connect to controls and support program records.
Findings
Section entitled “Findings”The findings describe problems or observations identified during an audit or other review. Accepted types include major non-compliance, minor non-compliance, observation and exception.
Use a finding for the reviewed problem and tasks or measures for the corrective work. This keeps the original conclusion while allowing owners, expiration dates and implementation evidence to change as the work progresses.
Reports and Evidence
Section entitled ‘Reports and evidence’Audit reports are generated from current audit records. Before sharing a report, check the scope, connected controls, find classification and supporting evidence. Publication of documents and electronic signatures provide separate approval records when a report or policy requires official registration.